Re: [squid-users] WCCP issue

Awie,

Check have you place
ip wccp redirect out
on your router interface.:)

-- 
Best Regs,
Masood Ahmad Shah
System Administrator
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
|   * * * * * * * * * * * * * * * * * * * * * * * *
|   Fibre Net (Pvt) Ltd. Lahore, Pakistan
|   Tel: +92-42-6677024
|   Mobile: +92-300-4277367
|   http://www.fibre.net.pk
|   * * * * * * * * * * * * * * * * * * * * * * * *
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)
----- Original Message ----- 
From: "Awie" <awie@eksadata.com>
To: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>; "Squid-users"
<squid-users@squid-cache.org>
Sent: Friday, September 12, 2003 5:56 PM
Subject: Re: [squid-users] WCCP issue
| The situation change so fast as I tried some possibilities. After I change
| the WCCP version in the squid.conf to be 4. The router captured a correct
| things as below:
|
| dpr-gtw-01#sh ip w w d
| WCCP Cache-Engine information:
|         IP Address:            my.squid.ip.addr
|         Protocol Version:      0.4
|         State:                 Usable
|         Initial Hash Info:     00000000000000000000000000000000
|                                00000000000000000000000000000000
|         Assigned Hash Info:    FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|                                FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
|         Hash Allotment:        256 (100.00%)
|         Packets Redirected:    0
|         Connect Time:          00:01:37
|
| It seems becoming better than before (compare to my last email). I also
| disabled the CEF at the interface that has ip wccp command.
| However, the packet still was not redirected
|
| Thx & Rgds,
|
| Awie
|
| ----- Original Message -----
| From: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>
| To: "Awie" <awie@eksadata.com>; "Squid-users"
<squid-users@squid-cache.org>
| Sent: Friday, September 12, 2003 5:26 PM
| Subject: Re: [squid-users] WCCP issue
|
|
| > Awie,
| >
| > Better to change IOS as you was running before. There must be something
| > wrong with IOS or WCCP module. If wccp module is working f9 then better
to
| > change IOS.
| >
| > --
| >
| > Best Regs,
| > Masood Ahmad Shah
| > System Administrator
| >
| > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > |   Fibre Net (Pvt) Ltd. Lahore, Pakistan
| > |   Tel: +92-42-6677024
| > |   Mobile: +92-300-4277367
| > |   http://www.fibre.net.pk
| > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > Unix is very simple, but it takes a genius to understand the simplicity.
| > (Dennis Ritchie)
| >
| > ----- Original Message -----
| > From: "Awie" <awie@eksadata.com>
| > To: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>; "Squid-users"
| > <squid-users@squid-cache.org>
| > Sent: Friday, September 12, 2003 1:55 PM
| > Subject: Re: [squid-users] WCCP issue
| >
| >
| > | Masood,
| > |
| > | Seems the problem because of CEF issue. My router has IOS version
| > 12.1.(3)T
| > | that pretty old (as my friend at Cisco said), perhaps having problem
| with
| > IP
| > | GRE as stated in the FAQ below:
| > |
| > | *******************************************
| > |
| > | IOS 12.x problems
| > | Some people report problems with WCCP and IOS 12.x. They see truncated
| or
| > | fragmented GRE packets arriving at the cache. Apparently it works if
you
| > | disable Cisco Express Forwarding for the interface:
| > |
| > | conf t
| > | ip cef          # some systems may already have 'ip cef global'
| > | int Ethernet 0/0      (or int FastEthernet 0/0 or other internal
| > interface)
| > | no ip route-cache cef
| > | CTRL Z
| > |
| > | This may well be fixed in later releases of IOS.
| > |
| > | *******************************************
| > |
| > | Now, I use route map instead WCCP and run normally, but I still want
to
| > use
| > | WCCP. As it is save and better than route map.
| > |
| > | Your advise please.
| > |
| > | Thx & Rgds,
| > |
| > | Awie
| > |
| > | ----- Original Message -----
| > | From: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>
| > | To: "Awie" <awie@eksadata.com>; "Squid-users"
| > <squid-users@squid-cache.org>
| > | Sent: Friday, September 12, 2003 1:33 PM
| > | Subject: Re: [squid-users] WCCP issue
| > |
| > |
| > | > no by default squid enable wccp ... so no need to compile with wccp
| > | support.
| > | > if you want to disable wccp then you can put --disable-wccp.
| > | > There is some buggy IOS in cisco they did not redirect traffic or
did
| > not
| > | > allot hash code. so better to change your IOS on cisco router.
| > | > if it does not solve porblem then better to check wccp module....
| > | > lsmod | grep wccp
| > | >
| > | >
| > | > onthing more make sure you have ip wccp redirect out on your router
| > border
| > | > interface
| > | >
| > | > --
| > | >
| > | > Best Regs,
| > | > Masood Ahmad Shah
| > | > System Administrator
| > | >
| > | > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > | > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > | > |   Fibre Net (Pvt) Ltd. Lahore, Pakistan
| > | > |   Tel: +92-42-6677024
| > | > |   Mobile: +92-300-4277367
| > | > |   http://www.fibre.net.pk
| > | > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > | > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > | > Unix is very simple, but it takes a genius to understand the
| simplicity.
| > | > (Dennis Ritchie)
| > | >
| > | > ----- Original Message -----
| > | > From: "Awie" <awie@eksadata.com>
| > | > To: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>; "Squid-users"
| > | > <squid-users@squid-cache.org>
| > | > Sent: Friday, September 12, 2003 9:11 AM
| > | > Subject: Re: [squid-users] WCCP issue
| > | >
| > | >
| > | > | After I clear WCCP statistic, I found a strange condition as
below:
| > | > |
| > | > | dpr-gtw-01#sh ip wccp
| > | > | Global WCCP information:
| > | > |     Router information:
| > | > |         Router Identifier:                   my.router.ip.adrr
| > | > |         Protocol Version:                    1.0
| > | > |
| > | > |     Service Identifier: web-cache
| > | > |         Number of Cache Engines:             1
| > | > |         Number of routers:                   1
| > | > |         Total Packets Redirected:            0
| > | > |         Redirect access-list:                redirect-to-squid
| > | > |         Total Packets Denied Redirect:       0
| > | > |         Total Packets Unassigned:            4578
| > | > |         Group access-list:                   squid-cache
| > | > |         Total Messages Denied to Group:      0
| > | > |         Total Authentication failures:       0
| > | > |
| > | > | dpr-gtw-01#sh ip wccp web-cache detail
| > | > | WCCP Cache-Engine information:
| > | > |         IP Address:            aaa.aaa.aaa.aaa
| > | > |         Protocol Version:      0.3
| > | > |         State:                 Usable
| > | > |         Initial Hash Info:     00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Assigned Hash Info:    00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Hash Allotment:        0 (0.00%)
| > | > |         Packets Redirected:    0
| > | > |         Connect Time:          00:08:25
| > | > |
| > | > | dpr-gtw-01#sh ip wccp web-cache detail
| > | > | WCCP Cache-Engine information:
| > | > |         IP Address:            aaa.aaa.aaa.aaa
| > | > |         Protocol Version:      0.3
| > | > |         State:                 Usable
| > | > |         Initial Hash Info:     00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Assigned Hash Info:    00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Hash Allotment:        0 (0.00%)
| > | > |         Packets Redirected:    0
| > | > |         Connect Time:          00:08:30
| > | > |
| > | > | dpr-gtw-01#sh ip wccp web-cache detail
| > | > | WCCP Cache-Engine information:
| > | > |         IP Address:            aaa.aaa.aaa.aaa
| > | > |         Protocol Version:      0.3
| > | > |         State:                 Usable
| > | > |         Initial Hash Info:     00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Assigned Hash Info:    00000000000000000000000000000000
| > | > |                                00000000000000000000000000000000
| > | > |         Hash Allotment:        0 (0.00%)
| > | > |         Packets Redirected:    0
| > | > |         Connect Time:          00:08:30
| > | > |
| > | > | There are only Unassigned Packets displayed and the HASH Allotment
| is
| > 0.
| > | I
| > | > | suspect it is because of Linux / Squid issue instead Cisco IOS.
| > | > |
| > | > | I configured the Squid without any parameter. Should I use
| > | > the --enable-wccp
| > | > | parameters?
| > | > |
| > | > | Thx & Rgds,
| > | > |
| > | > | Awie
| > | > |
| > | > | ----- Original Message -----
| > | > | From: "Awie" <awie@eksadata.com>
| > | > | To: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>; "Squid-users"
| > | > | <squid-users@squid-cache.org>
| > | > | Sent: Thursday, September 11, 2003 11:24 PM
| > | > | Subject: Re: [squid-users] WCCP issue
| > | > |
| > | > |
| > | > | > Masood,
| > | > | >
| > | > | > Do you mean I can remove the both standard and extend
access-list?
| > | Would
| > | > | you
| > | > | > give me the IOS sample?
| > | > | >
| > | > | > I used the same IOS command as my last succesfull setting that
| using
| > | > both
| > | > | > access-list.
| > | > | >
| > | > | > Thx & Rgds,
| > | > | >
| > | > | > Awie
| > | > | >
| > | > | > ----- Original Message -----
| > | > | > From: "Masood Ahmad Shah" <masood@ipsec.fibre.net.pk>
| > | > | > To: "Awie" <awie@eksadata.com>; "Squid-users"
| > | > | <squid-users@squid-cache.org>
| > | > | > Sent: Thursday, September 11, 2003 9:18 PM
| > | > | > Subject: Re: [squid-users] WCCP issue
| > | > | >
| > | > | >
| > | > | > > if you are using wccp then no need to deny Squid box ip in
| > | > | > redirect-to-squid
| > | > | > > access list. becoz cisco router does not route wccp cache to
| > traffic
| > | > to
| > | > | > wccp
| > | > | > > cache.
| > | > | > >
| > | > | > > --
| > | > | > >
| > | > | > > Best Regs,
| > | > | > > Masood Ahmad Shah
| > | > | > > System Administrator
| > | > | > >
| > | > | > > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > | > | > > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > | > | > > |   Fibre Net (Pvt) Ltd. Lahore, Pakistan
| > | > | > > |   Tel: +92-42-6677024
| > | > | > > |   Mobile: +92-300-4277367
| > | > | > > |   http://www.fibre.net.pk
| > | > | > > |   * * * * * * * * * * * * * * * * * * * * * * * *
| > | > | > > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
| > | > | > > Unix is very simple, but it takes a genius to understand the
| > | > simplicity.
| > | > | > > (Dennis Ritchie)
| > | > | > >
| > | > | > > ----- Original Message -----
| > | > | > > From: "Awie" <awie@eksadata.com>
| > | > | > > To: "Squid-users" <squid-users@squid-cache.org>
| > | > | > > Sent: Thursday, September 11, 2003 5:43 PM
| > | > | > > Subject: [squid-users] WCCP issue
| > | > | > >
| > | > | > >
| > | > | > > | All,
| > | > | > > |
| > | > | > > | I was succesfull to run WCCP with my old box (Linux 2.2.19
and
| > | Squid
| > | > | > > 2.3.S4)
| > | > | > > | using WCCP patch of Joe Copper.
| > | > | > > |
| > | > | > > | Now, I use new version of Linux 2.4.21 and Squid 2.4S7 and
| Cisco
| > | > 3660
| > | > | > with
| > | > | > > | IOS 12.1. The router did not work well to redirect the
| packets.
| > | > Below
| > | > | > the
| > | > | > > | messages in Linux box and Cisco Router as well.
| > | > | > > |
| > | > | > > |
| > | > | > > | # lsmod
| > | > | > > |
| > | > | > > | Module               Size      Used by        Not Tainted
| > | > | > > | ipt_REDIRECT    1408         1               (autoclean)
| > | > | > > | ip_wccp             1456         0                (unused)
| > | > | > > |
| > | > | > > |
| > | > | > > | dpr-gtw-01#sh ip wccp
| > | > | > > | Global WCCP information:
| > | > | > > |     Router information:
| > | > | > > |         Router Identifier:                   aaa.aaa.aaa.aaa
| > | > | > > |         Protocol Version:                    1.0
| > | > | > > |
| > | > | > > |     Service Identifier: web-cache
| > | > | > > |         Number of Cache Engines:             1
| > | > | > > |         Number of routers:                   1
| > | > | > > |         Total Packets Redirected:            14159
| > | > | > > |         Redirect access-list:
redirect-to-squid
| > | > | > > |         Total Packets Denied Redirect:       17336
| > | > | > > |         Total Packets Unassigned:            222478
| > | > | > > |         Group access-list:                   squid-cache
| > | > | > > |         Total Messages Denied to Group:      0
| > | > | > > |         Total Authentication failures:       0
| > | > | > > |
| > | > | > > | Herewith IOS setting :
| > | > | > > |
| > | > | > > | !
| > | > | > > | ip wccp version 1
| > | > | > > | ip wccp web-cache redirect-list redirect-to-squid group-list
| > | > | squid-cache
| > | > | > > | !
| > | > | > > | !
| > | > | > > | interface Serial1/0
| > | > | > > | Bla..bla...bla.....
| > | > | > > | ip wccp web-cache redirect out
| > | > | > > | !
| > | > | > > | interface Serial1/1
| > | > | > > | Bla..bla...bla.....
| > | > | > > | ip wccp web-cache redirect out
| > | > | > > | !
| > | > | > > | !
| > | > | > > | ip access-list standard squid-cache
| > | > | > > |  permit ip.of.my.Squid
| > | > | > > | !
| > | > | > > | ip access-list extended redirect-to-squid
| > | > | > > |  deny   tcp host ip.of.my.squid any eq www
| > | > | > > |  permit ip my.subnet.block.list any
| > | > | > > |  deny   tcp any any eq www
| > | > | > > | !
| > | > | > > | !
| > | > | > > | !
| > | > | > > |
| > | > | > > | FYI, I have 2 Internet links that attached to both serial of
| > | router.
| > | > | > > |
| > | > | > > | Why did the router display lines below?
| > | > | > > | What does the packet unassigned mean? Is it any non-HTTP
| packet?
| > | > | > > |
| > | > | > > | Total Packets Denied Redirect:       17336
| > | > | > > | Total Packets Unassigned:            222478
| > | > | > > |
| > | > | > > | Your answer is very appreciated and waited for.
| > | > | > > |
| > | > | > > | Thx & Rgds,
| > | > | > > |
| > | > | > > | Awie
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > >
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| > |
| > |
| >
|
|
|